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AMENDMENTS TO THE CLAIMS 

1 1 . (ciurently amended) A method of providing data from a service to a client over a 

2 telecommunication network based on encryption capabilities of the client, the method 

3 comprising the computer-implemented steps of: 

4 receiving from the client a request for data and a list of encryption types representing 

5 encryption capabilities that are available at the client; 

6 determining an encrNT)tiQn type match bv matching the list of encryption types 

7 received from the client list of encryption types to a mapping of encryption 

8 types to a list of one or more available online services : 

9 selecting [[a]] an online service that can provide the data to the client, based on 

10 matching tho list ef cnoryption t>pog roooivod from the client to a mapping of 

1 1 encryption typ e s to available s e rvic e s th e encryption type match and the list of 

12 one or more available online services associated with the encryption type 

1 3 match : and 

14 causing communication of the data from the selected online sCTvice to the client. 

1 2. (original) A method as recited in Claim I, further comprising the step of establishing 

2 a secure connection with the client, and wherein the receiving step is carried out as part of the 

3 establishing step. 

1 3. (original) A method as recited in Claim 1 , further comprising the step of estabUshing 

2 a secure connection with the client, and wherein the recei\Tng step is carried out as part of the 

3 establishing step, wherein the secure connection is established using a security protocol 

4 selected from among the set consisting of SSL, PPTP, SSH, and IPSec. 
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1 4. (cwrently amended) A method as recited in Claim [[9]) i, further comprising the step 

2 of establishing a secure connection with the client, and wherein the receiving step is carried 

3 out as part of the establishing step, wherein the step of establishing the secure connection 

4 further comprises the step of establishing the secure connection with the client using a cipher 

5 suite match. 

1 5. (original) The method as recited in Claim 1, further comprising the step of 

2 estabhshing a secure connection with the cHent> and wherein the receiving step is carried out 

3 as part of the establishing step, and further comprising the step of disconnecting the secure 

4 connection and reestablishing the secure connection using a cipher suite match. 

1 6, (original) The method as recited in Claim 1 , wherein the ordered mapping of 

2 encryption types to services is an ordered mapping of cipher suites to services. 

1 7. (original) The method as recited in Claim 1 , further comprising the steps of receiving 

2 a weight value for one or more of the encryption types, and ordering tibie mappitxg of 

3 encryption types to services based on the received weight values. 

1 8. (original) A method as recited in Claim 1 , wherein the encryption type is a cipher 

2 suite match. 

1 9, (currently amended) A method as recited in C3aim 1, wherein the step of selecting an 

2 online service that can provide the data to the client, based the encryption type match and the 

3 list of one or more available online services associated with the encryption type match 

4 d e t e imining the s e rv^ic e further comprises the steps of: 

5 selecting a server farm based on the service; and 

6 selecting a particular server in the server farm to provide the data to the client. 

1 10. (original) A method as recited in Claim 1, wherein the step of causing commimication 

2 further comprises the step of establishing a connection with a non-encrypted protocol for use 
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3 in commimicatixig a request to the selected service to cau$e communication of the data from 

4 the selected service to the client. 

1 11, (new) A method of providing data from a service to a client based on encryption 

2 capabilities of the client, the method comprising the computer-implem^ted steps of: 

3 receiving an ordered mapping of cipher suite names to services; 

4 receiving from the client a request for data and an ordered list of cipher suites; 

5 determining a cipher suite match by selecting a first conunon cipher suite in the 

6 ordered list of cipher suites and the ord^d mapping of cipher suite names to 

7 services; 

8 transmitting the cipher suite match to the client; 

9 selecting the service associated with the cipher suite match; 

1 0 selecting a server farm based on the service; 

1 1 selecting a particular server in the server farm to provide the data to the client; and 

12 transmitting the data to the client 

1 1 2. (original) A method as recited in Claim 1 , wherein the mapping of encryption types to 

2 services is stored in an SSL termination module. 

1 13. (currently amended) A method of providing data associated with a service to a client 

2 over a telecommunication network based on SSL encryption capabilities of the cUent, the 

3 method comprising the computer-implemented steps of: 

4 creating and storing, at an SSL termination device, a mapping that associates cipher 

5 suites (hat are supported by the SSL temiination device with one or more 

6 online services that are accessible through the SSL termination device; 

7 receiving from the client as part of an SSL handshake phase message, a request for 

8 data and a list of cipher suites that are available at the client; 
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9 tnatching the cipher suite list received from the client to the mapping to result in 

10 identifying at least one cipher suite in common between the cipher suite list 

1 1 and the mapping; 

1 2 identifying, from the mapping, [[a]] an online service corresponding to the cipher 

1 3 suite in common; and 

1 4 causing communication of the data from the selected online s ervice to the client over 

15 an SSL connection using encryption parameters as defined in the cipher suite 

16 in common. 

1 14. (currently amended) A method of providing data from a service to a client based on 

2 encryption capabilities of the client, the method conq>rising the computer-implemented steps 

3 of: 

4 transmitting to an endpoint a request for data and an ordered list of encryption types 

5 that correspond to encryption types that are available at the client; 

6 receiving from the endp)oint an encryption type wherein the encryption type is 

7 determine d at the cndooint by matching the Kst of encryption types received from the 
S client list of encryption tvnes to a mapping of encryption types to a list of one or more 
9 available online services: and 

1 0 receiving data that corresponds to the request from the service that is selected based 

11 on the encryption type wherein the service is determined at the endpoint bv selecting 

12 a service associated with the encryption type . 

1 15. (original) A method as recited in Claim 14, frulfa^ comprising the step of establishing 



2 a secure connection between the client and the endpoint, wherein the secure connection is 

3 established using a security protocol consisting of SSL, PPTP, SSH, and IPSec. 
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1 16. (original) A method as recited in Claim 1 5, wherein the step of establishittg the secure 

2 connection further comprises the step of establishing the secure connection between the 

3 client and the endpoint using a cipher suite matoh^ 

1 17. (original) The method as recited in Claim 15, further comprising the step of 

2 disconnectmg the secure connection and reestablishing the secure connection using a cipher 

3 suite match. 

1 18. (original) The method as recited in Claim IS, wherein the endpoint is a SSL 

2 temunation device. 



1 1 9. (original) The method as recited in Claim 1 5, wherein the ordered list of encryption 

2 types is an ordered list of cipher suites. 

1 20. (original) A method as recited in Claun 1 9, wherein the encryption type is a cipher 

2 suite match. 

1 21 . (cujtxently amended) A computer-readable medium carrying one or more sequences of 

2 instructions for providing data jBrom a service to a client based on encryption capabilities of 

3 the client, which instructions, when executed by one or more proce$sors> cause the one or 

4 more processors to cany out the steps of: 

5 transmitting to an endpoint a request for data and an ordered list of encryption types 

6 that correspond to encryption types that are available at the client; 

7 receiving from the endpoint an erwryption type wh^ein the encrvption type is 

8 determined at the endpoint by matching the list of encryption types received 

9 from the client hst of encrvption types to a mapping of encryption types to a 
10 list of one or more available online services: and 



Seq. No. 4917 6 

PAGE 8/23'RCVDAT4/27/20066:36:57PM [Eastern Da^^^ 



04/27/2086 15:36 4084141076 



HPTB 



PAGE 09/23 



^" * Docket No. 50325-0631 



) I receiving data that corresponds to the request from the service that is selected based 

1 2 on the OTcryption type wherein the service is determined at the endpoint by 

13 selecting a service associated with the encryption type . 

1 22. (currently amended) A computer-readable mediimi carrying one or more sequences of 

2 instructions for providing data from a service to a client based on encryption capabilities of 

3 the client, which instructions, when executed by one or more processors, cause the one or 

4 more processors to carry out the steps of: 

5 receiving from the client a request for data and a list of encryption types representing 

6 encryption capabihties that are available at the client; 

7 determining an encryption type match by matching the list of encryption types 

8 received from the client list of encryption types to a mapping of qicrvption 

9 types to a list of one or more available online services 

1 0 selecting [[a]] an online service thai can provide the data to the client, based on 

U matching tho list of onor^ption t>poa rec e ived from th e cli e nt to a mapping of 

12 enoryption typ e s to availoblo oorvioea th e encryption type match and the list of 

13 one or more available online services associated with the encryption type 

14 match ; and 

15 causing communication of the data from the selected service to the client. 

1 23. (currently amended) An apparatus for providing data from a service to a client based 

2 on encryption capabilities of the client, comprising: 

3 means for transmitting to an endpoint a request for data and an ordered list of 

4 encryption types that correspond to encryption types that ate available at the 

5 client; 

6 means for receiving Scom the endpoint an encryption type; and 
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7 means for receiving data that corresponds to the request from the service that is 

8 selected based on the encryption type, 

1 24. (currently amended) An apparatus for providing data fcom a service to a client based 

2 on encryption capabilities of the client, comprising: 

3 a networic interface that is coupled to a data network for receiving one or more packet 

4 flows therejfrom; 

5 a processor; 

6 one or more stored sequences of instructions which, when executed by the processor, 

7 cause the processor to carry out the steps of: 

S transmitting to an endpoint a request for data and an ordered list of encryption 

9 types 

10 that correspond to encryption types that are available at the client; 

1 1 receiving from the endpoint an encryption type wherein the encryption type is 

12 determined at the endpoint bv matching the list of encryption types received 

13 from the client list of encryption types to a mapping of encryption types to a 

14 list of one or more available online services; and 

1 5 receiving data that corresponds to the request from the service that is selected 

1 6 based on the encryption type wherein the service is determined at the endpoint 

17 bv selecting a service associated with the encryption type , 

1 25, (currently amended) An apparatus for providing data from a service to a client based 

2 on encryption capabilities of the client, comprising: 

3 means for receiving from the client a request for data and a list of encryption types 

4 representing encryption capabilities that are available at the client; 
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5 means for detennining a n encryption type match bv matching the list of encrvptLOti 

6 types received from the cl ient list of encryption t\^es to a mapping of 

7 encryption types to a list of one or more available online services 

8 means for selecting [[a]] an online service that can provide the data to the client, 

9 based on matching th e list of o noryption typ e s rec e ived from tho cli e nt to a 

10 mcyping of encr^'ption typ e s te - avoiioblo Gorviccs th e encryption type match 

1 1 and the list of one or more available online services associated with the 

12 encryption type match : and 

1 3 means for causing communication of the data from the selected service to the client. 

1 26. (currently amended) An apparatus for providing data from a service to a client based 

2 on encryption capabilities of the client, comprising: 

3 a network interface that is coupled to a data network fot receiving one or more packet 

4 flows th«refrom; 

5 a processor; 

6 one or more stored sequences of instructions which, when executed by the processor, 

7 cause the processor to carry out the steps of: 

8 receiving from the client a request for data and an ordered list of encryption 

9 types; 

10 determining an encryption type match bv matching the list of encryption types 

11 received from the client Ust of encryption types to a mapping of encryption 

12 types to a list of one or more available online services: 

1 3 determining a particular server to retrieve the data based on t h e ord e r e d list of 

14 energy tion types and an - ordet - ed mapping of encr>ption typ e s to oervices 
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^5 mcryption type matc h and the list of one or more available online services 

16 associated with the encryption type match: and 

^ 7 causing communication of the data from the particular server to the client. 

1 27. (currently amended) A method of providing data from a service to a client based on 

2 encryption capabilities of the client, the method comprisiAg the computer-implemented steps 

3 of: 

4 receiving an ordered list of cipher suites that corresponds to cipher suites available to 

5 a client; 

6 establishing an SSL connection with an SSL termination module; 

7 transmitting to the SSL termination module a request for data and the ordered list of 

8 ciph^ suites; 

9 receiving from the SSL termination module a cipher suite match wherein the cipher 

10 suite match is determined bv matching the order list of cipher suites available 

1 1 to a client from the list of _cipher suites mapped to a list of one or more 

12 available services: 

1 3 establishing [[an]} a new SSL connection with the SSL termination module using the 

1 4 cipher suite match; and 

1 5 receiving data that corresponds to the request wherein the data! is retrieved from [[a]] 

1 6 an online service that is selected based on the cipher suite match. 



1 28. (cancelled) 
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